Overview

overview

10

Static

static

10

308cefeeae...386bf4

linux_amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4

  • Size

    111KB

  • Sample

    220621-dxxkwaacej

  • MD5

    e8ca1c8cbdcc73b6dd83e6b9e5e979f3

  • SHA1

    d59e9ecae20afc2ef0d7686bfb21f435609ef885

  • SHA256

    308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4

  • SHA512

    7098bd07009f5b8ca891f59bf217237ccf7580ed4f19d5499aeabd6687eb6070768cb75098655e236eca2dbb607402fa0fc4a90e54a98740b3f70c7ba4337863

Score
10/10
kaitenlinuxpersistence

Malware Config

Targets

    • Target

      308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4

    • Size

      111KB

    • MD5

      e8ca1c8cbdcc73b6dd83e6b9e5e979f3

    • SHA1

      d59e9ecae20afc2ef0d7686bfb21f435609ef885

    • SHA256

      308cefeeae83c3ef5500fa56f2e6dfb2f5e117f302bb970155c7b66c92386bf4

    • SHA512

      7098bd07009f5b8ca891f59bf217237ccf7580ed4f19d5499aeabd6687eb6070768cb75098655e236eca2dbb607402fa0fc4a90e54a98740b3f70c7ba4337863

    Score
    7/10
    persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks